CVE-2024-38341

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

IBM Sterling Secure Proxy 6.0.0.0 through 6.0.3.1, 6.1.0.0 through 6.1.0.0, and 6.2.0.0 through 6.2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-328 CWE-326

Affected software

Vendor	Product	Versions
IBM	Sterling Secure Proxy	>= 6.0.0.0, <= 6.0.3.1; >= 6.1.0.0, <= 6.1.0.1; >= 6.2.0.0, <= 6.2.0.1

References

https://www.ibm.com/support/pages/node/7234888Vendor Advisory

Timeline

Published: May 28, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-383445.4A cross-site request forgery vulnerability exists in WP Tweet Walls versions prior to 1.0.4. If this vulnerability is exploited, an attacker CVE-2024-383458.1A cross-site request forgery vulnerability exists in Sola Testimonials versions prior to 3.0.0. If this vulnerability is exploited, an attac CVE-2024-383469.8The CloudStack cluster service runs on unauthenticated port (default 9090) that can be misused to run arbitrary commands on targeted hypervi CVE-2024-383478.8CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Room Information mod CVE-2024-383488.8CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module vi CVE-2024-383515.4Pocketbase is an open source web backend written in go. In affected versions a malicious user may be able to compromise other user accounts.CVE-2024-383535.3CodiMD allows realtime collaborative markdown notes on all platforms. CodiMD before 2.5.4 is missing authentication and access control vulne CVE-2024-383546.1CodiMD allows realtime collaborative markdown notes on all platforms. The notebook feature of Hackmd.io permits the rendering of iframe `HTM CVE-2024-383557.3Socket.IO is an open source, real-time, bidirectional, event-based, communication framework. A specially crafted Socket.IO packet can trigge CVE-2024-383566.1TinyMCE is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in TinyMCE’s content extraction code. CVE-2024-383576.1TinyMCE is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in TinyMCE’s content parsing code. Thi CVE-2024-383582.9Wasmer is a web assembly (wasm) Runtime supporting WASIX, WASI and Emscripten. If the preopened directory has a symlink pointing outside, WA